This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/90wx0g7LJ2Ik6RwZ9ZVb02BVRkg.roa File: 90wx0g7LJ2Ik6RwZ9ZVb02BVRkg.roa (raw, json) Hash identifier: zW6pp/4SYi0z7YFERGfk3Ofy+qs3IvsREu5sTNdATtI= Subject key identifier: F7:4C:31:D2:0E:CB:27:62:24:E9:1C:19:F5:95:5B:D3:60:55:46:48 Certificate issuer: /CN=03d602b9e1da2b568df544bda50e415799bbb1e2 Certificate serial: 019B7FF12C052EF862F0213FAF4A64C0D19C Authority key identifier: 03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/90wx0g7LJ2Ik6RwZ9ZVb02BVRkg.roa Signing time: Fri 02 Jan 2026 18:21:10 +0000 ROA not before: Fri 02 Jan 2026 18:21:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201112 IP address blocks: 31.3.218.0/23 maxlen: 23 194.110.4.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.mft rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 21:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7f:f1:2c:05:2e:f8:62:f0:21:3f:af:4a:64:c0:d1:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03d602b9e1da2b568df544bda50e415799bbb1e2 Validity Not Before: Jan 2 18:21:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=f74c31d20ecb276224e91c19f5955bd360554648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:86:09:16:57:0f:87:86:bc:8f:c4:7c:bc:61: d1:c8:a0:12:85:08:35:d8:1a:c7:9f:b1:d6:cd:fe: d5:e2:52:f8:fe:c2:13:06:64:2f:fe:fd:06:bd:9b: e1:03:09:5f:48:de:2f:c3:f1:3c:cf:b3:de:f3:6f: 59:1e:37:aa:5c:17:c8:3f:cb:1c:44:d2:f0:66:41: 73:66:e3:3d:1a:ba:70:e5:9c:df:7e:f0:46:a8:a7: ca:2b:f4:9e:c4:52:35:42:21:3b:c5:0a:b1:4e:7f: 8a:71:53:94:1a:ef:65:86:83:d7:dc:b1:d4:18:e4: 37:8b:3d:f2:66:49:29:69:44:4a:8b:82:58:fc:7f: 4a:5f:ea:d2:89:c5:04:5c:20:81:76:07:0c:c3:38: 94:b4:b7:08:eb:6e:60:37:2f:44:67:8c:f5:85:93: 8b:28:dd:7d:35:75:66:ed:4b:41:e6:27:5f:f9:64: 97:17:30:e8:a6:fc:97:46:61:af:a2:16:9e:f2:1e: 44:ba:58:ba:f1:84:f1:42:c7:c3:f4:c0:60:26:22: 38:5d:2a:d9:2a:e1:11:59:6c:42:56:cd:39:23:78: 47:a7:54:8d:3c:07:8a:09:37:3e:3d:22:9f:37:c1: 5d:75:f5:33:fd:c3:2f:a0:30:a5:bf:d4:ab:bd:a1: 4e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:4C:31:D2:0E:CB:27:62:24:E9:1C:19:F5:95:5B:D3:60:55:46:48 X509v3 Authority Key Identifier: keyid:03:D6:02:B9:E1:DA:2B:56:8D:F5:44:BD:A5:0E:41:57:99:BB:B1:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9YCueHaK1aN9US9pQ5BV5m7seI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/90wx0g7LJ2Ik6RwZ9ZVb02BVRkg.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/92fbd9-b9ee-42fc-aac1-fb97ddd54891/1/A9YCueHaK1aN9US9pQ5BV5m7seI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 31.3.218.0/23 194.110.4.0/23 Signature Algorithm: sha256WithRSAEncryption 0b:a1:69:ba:d5:11:02:b3:b1:35:8b:2f:dc:51:03:60:c8:26: bc:96:d5:55:c0:cd:10:24:52:81:73:c7:2f:1e:70:eb:d5:26: 93:bd:25:81:56:66:28:e9:4f:f5:6c:8d:9c:c6:e2:90:8e:30: e9:9e:18:e2:90:68:b7:02:a1:63:18:35:cd:9a:87:a4:fd:6e: df:31:e0:92:3f:46:28:a7:7b:33:d7:4a:cd:cf:6e:62:bf:d0: 59:cc:17:8e:41:97:fa:f1:04:84:c7:ca:5f:b2:45:f8:02:ca: ba:63:8b:bf:43:ea:e5:46:f9:8f:fc:a4:5c:4f:8d:cf:87:0e: 12:45:18:95:ff:38:80:f2:ba:75:a0:4d:c4:c0:44:0b:c1:ef: 95:df:b0:2f:ec:54:f1:08:f3:a0:14:60:95:b8:ed:90:51:e7: f8:87:83:de:64:0f:54:97:15:fd:4b:a8:fe:39:ff:9f:f1:2c: e7:7a:e0:75:8f:84:26:60:4e:cc:f8:b6:28:df:87:aa:e3:e6: 3b:0c:46:db:4d:d8:11:06:06:cd:7f:8e:cb:41:a0:a6:f6:57: f7:eb:0f:57:c0:9c:70:e8:3d:a2:a2:16:75:8f:37:0d:25:b1: c3:15:1c:4d:b8:0d:ea:39:91:ba:a2:30:0c:eb:90:c0:95:c9: b9:bd:3a:6a -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt/8SwFLvhi8CE/r0pkwNGcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzZDYwMmI5ZTFkYTJiNTY4ZGY1NDRiZGE1MGU0MTU3OTli YmIxZTIwHhcNMjYwMTAyMTgyMTEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhmNzRjMzFkMjBlY2IyNzYyMjRlOTFjMTlmNTk1NWJkMzYwNTU0NjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYYJFlcPh4a8j8R8vGHRyKAShQg1 2BrHn7HWzf7V4lL4/sITBmQv/v0GvZvhAwlfSN4vw/E8z7Pe829ZHjeqXBfIP8sc RNLwZkFzZuM9Grpw5ZzffvBGqKfKK/SexFI1QiE7xQqxTn+KcVOUGu9lhoPX3LHU GOQ3iz3yZkkpaURKi4JY/H9KX+rSicUEXCCBdgcMwziUtLcI625gNy9EZ4z1hZOL KN19NXVm7UtB5idf+WSXFzDopvyXRmGvohae8h5Euli68YTxQsfD9MBgJiI4XSrZ KuERWWxCVs05I3hHp1SNPAeKCTc+PSKfN8FddfUz/cMvoDClv9SrvaFOpwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFPdMMdIOyydiJOkcGfWVW9NgVUZIMB8GA1UdIwQY MBaAFAPWArnh2itWjfVEvaUOQVeZu7HiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85MmZiZDktYjllZS00MmZjLWFhYzEt ZmI5N2RkZDU0ODkxLzEvOTB3eDBnN0xKMklrNlJ3WjlaVmIwMkJWUmtnLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85MmZiZDktYjllZS00MmZjLWFhYzEtZmI5N2RkZDU0ODkx LzEvQTlZQ3VlSGFLMWFOOVVTOXBRNUJWNW03c2VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBHwPaAwQB wm4EMA0GCSqGSIb3DQEBCwUAA4IBAQALoWm61RECs7E1iy/cUQNgyCa8ltVVwM0Q JFKBc8cvHnDr1SaTvSWBVmYo6U/1bI2cxuKQjjDpnhjikGi3AqFjGDXNmoek/W7f MeCSP0Yop3sz10rNz25iv9BZzBeOQZf68QSEx8pfskX4Asq6Y4u/Q+rlRvmP/KRc T43Phw4SRRiV/ziA8rp1oE3EwEQLwe+V37Av7FTxCPOgFGCVuO2QUef4h4PeZA9U lxX9S6j+Of+f8SzneuB1j4QmYE7M+LYo34eq4+Y7DEbbTdgRBgbNf47LQaCm9lf3 6w9XwJxw6D2iohZ1jzcNJbHDFRxNuA3qOZG6ojAM65DAlcm5vTpq -----END CERTIFICATE-----Generated at Tue Feb 10 04:30:51 2026 by rpki-client